System and method for authenticating multiple devices with a same credential

ABSTRACT

A first device implements an application platform that is shared with a second device. The application platform can be implemented so that the first device and the second device operate to have a same identity to at least the network service. The first device provides a user interface in order to receive input for accessing or using the network service. Additionally, the first device communicates input received in response to providing the user interface to the network service. The first device can receive a token from the network service in response to communicating the input. Additionally, the first device can communicate a set of data items to the second device. The set of data items includes the token and one or more identifiers that enable the second device to access and use the network service while appearing as the first device to the network service.

RELATED APPLICATIONS

This application claims benefit of priority to (i) Provisional U.S.Patent Application No. 61/730,797, filed Nov. 28, 2012, entitled SYSTEMAND METHOD FOR USE OF NETWORK SERVICES IN RECEIVING CONTENT AND DATA;and (ii) Provisional U.S. Patent Application No. 61/800,274, filed Mar.15, 2013, entitled SYSTEM AND METHOD FOR USE OF NETWORK SERVICES INRECEIVING CONTENT AND DATA; both of the aforementioned priorityapplications being hereby incorporated by reference in their respectiveentirety.

TECHNICAL FIELD

Embodiments described herein pertain generally to a system and methodfor presenting content, and more specifically, a system and method forpresenting content with time-based metadata.

BACKGROUND

Network services (or sometimes referred to as “cloud” computingservices) exist in various forms. For example, cloud music servicesinclude PANDORA, SPOTIFY and RHAPSODY are available to users on variouscomputing platforms. More generally, a variety of network services areavailable to users, such as streaming services for movies, photo-sharingsites, social networking sites, and gaming sites. Numerous types ofdevices are used to access these services. For example, it is common fornetwork services to be accessible to mobile devices, tablets andpersonal computers operating different types of applications orbrowsers.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 illustrates an example system in which multiple devices cooperatewith one another in accessing a network service for network service dataitems.

FIG. 2 illustrates a logical architecture for a playback device,according to one or more embodiments.

FIG. 3A illustrates a method for operating a computing device to handleuser interface operations for a network service, separate from a devicein which playback functionality is provided, according to one or moreembodiments.

FIG. 3B illustrates a method for operating a playback device to outputcontent from a network service, separate from a device in which userinterface functionality for the network services is provided, accordingto one or more embodiments.

FIG. 3C illustrates a method for handling user interface eventsgenerated from a network service when multiple devices access thenetwork service at the same time.

FIG. 3D illustrates an example method for implementing a digital rightsmanagement (DRM) scheme in context of two devices that access a networkservice.

FIG. 3E illustrates a method for operating a network service to enable auser to access a network service using multiple devices, according toone or more embodiments.

FIG. 4 illustrates a system for implementing a rights management servicein context of a user interface and playback device, according to one ormore embodiments.

FIG. 5 illustrates an architecture for a rights management service,according to an embodiment.

FIG. 6 illustrates a method for utilizing a rights management service,according to one or more embodiments.

FIG. 7A illustrates a user interface device in accordance with one ormore embodiments.

FIG. 7B illustrates a playback device in accordance with one or moreembodiments.

DETAILED DESCRIPTION

Embodiments described herein provide for a computing environment inwhich the use of a network service can be distributed amongst multipledevices. In particular, examples described herein provide for aretrieval or playback device that communicates with a network service toreceive data items (e.g., content). In the same session, another devicecan communicate with the network service to handle user interface eventsand functionality on behalf of the retrieval or playback device. Such aconfiguration enables more diversity in the type of device that can beused for retrieval or playback of data items from a network service. Forexample, an appliance or dedicated player can operate to retrievecontent from a network service, without need for the device to enabledirect user interaction. Rather, the user interaction that may otherwisebe required from the appliance or dedicated player can be providedthrough another device.

Additionally, some embodiments provide for use of an intermediary rightsmanagement service which can operate to communicate rights managementrules that control the manner in which retrieval or playback devicesaccess and use a given network service. The rights management servicecan be used to enable an independent or non-platform specificapplication to be used in connection with retrieval or playbackoperations from any one of multiple network services. Among otherbenefits, the rights management service enables network services to beaccessed and used without the need for proprietary or specific clientapplications which implement rights management rules for specificnetwork services.

In some embodiments, a network service is utilized by multiple devices.In an embodiment, a first device implements an application platform thatis shared with a second device. The application platform can beimplemented so that the first device and the second device operate tohave a same identity to at least the network service. The first deviceprovides a user interface in order to receive input for accessing orusing the network service. Additionally, the first device communicatesinput received in response to providing the user interface to thenetwork service. The first device can receive a token from the networkservice in response to communicating the input. Additionally, the firstdevice can communicate a set of data items to the second device. The setof data items includes the token and one or more identifiers that enablethe second device to access and use the network service while appearingas the first device to the network service.

In another variation, a playback device implements an applicationplatform that is shared with a user interface device. The applicationplatform can be implemented so that the playback device and the userinterface device can operate to have a same identity to at least thenetwork service. The playback device communicates with the userinterface device to receive a set of data items, the set of data itemsincluding (i) a token communicated by the network service to the userinterface device, and (ii) one or more identifiers that are used by theuser interface device in order to access the network service. Theplayback device accesses the network service using the token and the oneor more identifiers received from the user interface device.

According to some embodiments, a universal retrieval or playbackcomponent can be used with an intermediary rights management service inorder to enable a computing device to access and utilize any one ofmultiple possible network services, in accordance with rights managementrules of that service.

Among other benefits, embodiments described herein enable for variouskinds of network services (e.g., cloud media services, photo-sharingsites, etc.) to be received and utilized on a diverse range of devices(e.g., Internet-enabled accessories or appliance devices that streamcontent). In particular, devices can utilize such services withoutrequirement for the device to enable user interaction. Additionally,some embodiments provide for devices to use a universal program orresource to access network services, so that such devices do not need tohave resident (or previously installed) a proprietary orservice-specific application to implement functionality such as rightsmanagement rules.

Some embodiments described herein provide a system, method and devicefor utilizing a network service. In one embodiment, a first device isoperable to provide a user interface for the network service. From thefirst device, input received in response to providing the user interfaceis communicated to the network service. In response to communicating theinput, the user interface device receives a token for accessing thenetwork service. The user interface device communicates the token to aplayback device.

According to another embodiment, a playback device operates to receiveplurality of links from a user interface device. The plurality of linkscan identify (or be used to identify) one or more network service dataitems. A network service data item that is identified by each of theplurality of links is retrieved from the network service. While thenetwork service data items are retrieved, the playback device detects anoccurrence of a user interface event that is generated from the networkservice. Data identifying the user interface event is communicated tothe user interface device.

Still further, an embodiment includes a system comprising a first deviceand a second device. The first device provides a user interface, and thesecond device includes a data output component. The first device may beconfigured to receive information from a user through the userinterface, and to communicate the information to the network service.The first device may also receive a token or other programmaticcredential from the network service in response to communicating theinformation. The first device may communicate the token to the seconddevice. The second device may be configured to use the token to accessthe network service without receiving input from the user. The dataitems received from the network service are outputted using the outputcomponent.

Still further, an embodiment provides for a playback device thatoperates to receive a plurality of links from a user interface device.Each of the plurality of links identifies one or more network servicedata items. A network service data item is retrieved as identified byeach of the plurality of links. While retrieving the network servicedata item identified by each of the plurality of links, an occurrence ofa user interface event is detected with the network service. Dataidentifying the user interface event is communicated to the userinterface device.

In another embodiment, network service is utilized on a playback device.On a first device, a session is established with a network service toreceive media data items for playback. With the first device, a seconddevice is controlled to use the programmatic credential of the firstdevice to access the network service and retrieve media data itemsduring the session.

In another embodiment, a computer system is provided for utilizing anetwork service. The computer system includes a memory to store aplurality of network service libraries, where each network servicelibrary is associated with a corresponding network service. Each networkservice library may include (i) a collection of link data, the link dataidentifying a data item provided on the network service, and (ii) a setof rights management rules for the network service. A processor of thecomputer system can determine the network service that is specified bythe communication. The processor can also determine, from the networkservice library, the link data in the collection of link data thatidentifies each identifier in the set of identifiers. One or morecontrol parameters are also determined for the communication that arebased on the set of rights management rules for the determined service.A set of links are communicated to the playback device that are based onthe determined link data. The set of links may also be communicated withthe control parameters to enable the playback device to retrieve dataitems from the determined network service in accordance with the set ofrights management rules for that network service.

In an embodiment, a first set of links is received from a user interfacedevice. Each link in the first set of links (i) identifies a data itemon a corresponding first network service, and (ii) directs the playbackdevice to an intermediary network service. The first set of links issignaled to the intermediary network service, and in response, a secondset of links are received from the intermediary network service. Eachlink in the second set of links identifies the data item of one of thefirst of identifiers.

According to another embodiment, a first set of links are structured, sothat each link in the first set of links (i) identifies a data item on acorresponding first network service, and (ii) links to an intermediarynetwork service. The first set of links is signaled to a playback deviceto cause the playback device to access the intermediary network service.

Still further, an embodiment provides a player on a computing devicethat is able to playback content from multiple network services. Anetwork service can detect and use the player as an alternative to aservice-specific application for that service. Media resources from thenetwork service can be played back by accessing an intermediate rightsmanagement service to identify a set of media resources from the networkservice for playback. A set of playback links for each media resource inthe set are received from the intermediate rights management service.The set of playback links each link to a corresponding media resourceprovided from the network service.

One or more embodiments described herein provide that methods,techniques and actions performed by a computing device are performedprogrammatically, or as a computer-implemented method. Programmaticallymeans through the use of code, or computer-executable instructions. Aprogrammatically performed step may or may not be automatic.

One or more embodiments described herein may be implemented usingprogrammatic modules or components. A programmatic module or componentmay include a program, a subroutine, a portion of a program, or asoftware component or a hardware component capable of performing one ormore stated tasks or functions. As used herein, a module or componentcan exist on a hardware component independently of other modules orcomponents. Alternatively, a module or component can be a shared elementor process of other modules, programs or machines.

Furthermore, one or more embodiments described herein may be implementedthrough the use of instructions that are executable by one or moreprocessors. These instructions may be carried on a computer-readablemedium. Machines shown or described with figures below provide examplesof processing resources and computer-readable mediums on whichinstructions for implementing embodiments of the invention can becarried and/or executed. In particular, the numerous machines shown withembodiments of the invention include processor(s) and various forms ofmemory for holding data and instructions. Examples of computer-readablemediums include permanent memory storage devices, such as hard drives onpersonal computers or servers. Other examples of computer storagemediums include portable storage units, such as CD or DVD units, flashmemory (such as carried on many multifunctional phones and portablecomputing devices), and magnetic memory. Computers, terminals, networkenabled devices (e.g. mobile devices such as cell phones) are allexamples of machines and devices that utilize processors, memory, andinstructions stored on computer-readable mediums. Additionally,embodiments may be implemented in the form of computer-programs, or acomputer usable carrier medium capable of carrying such a program.

System Overview

FIG. 1 illustrates an example system in which multiple devices cooperatewith one another in accessing a network service. In particular, anexample system 100 enables network services 102 to be accessed and usedthrough a first device, which is provided in FIG. 1 as a user interfacedevice 110, and a second device, which is provided in FIG. 1 as aplayback device 120. The network service 102 can be accessed over anetwork 113 (e.g., Internet) by each of the user interface device 110and playback device 120 through, for example, a website. The networkservices 102 that can be used by an example system 100 include, forexample, websites (e.g., social networking sites, photo sharing sitesetc.), or cloud-based media services (e.g., music playback sites such asPANDORA).

Among other benefits, the example of FIG. 1 recognizes that while thereare numerous kinds of network enabled devices, some network enableddevices are not suited for handling user interface interactions requiredfrom network services 102. For example, some devices such as televisionsrequire users to utilize remote controls that are difficult to operatein providing input. Other devices, such as (streaming or re-streamingappliances) and have limited or no user interactive capabilities thatare local on the device. Such operating environments limit the abilityof these devices to utilize network services, particularly when suchservices require user interaction for certain events.

With reference to an example of FIG. 1, system 100 includes a userinterface device 110, and playback device 120. The user interface device110 can correspond to any network enabled computing device that iscapable of receiving user input, and of communicating such input toother devices and/or network services or websites. As examples, the userinterface device 110 can correspond to a mobile computing device (e.g.,multifunctional cellular/telephony device, such as smart phone), tablet,laptop, netbook, combination computing device, personal computer, etc.The user interface device 110 can include a network service interface112, a user interface 114, and a device network interface 116. Thecomponents can be implemented using a combination of hardware, logicand/or software. The network service interface 112 can comprise softwareor logic for accessing network locations or sites that are associatedwith or otherwise used in providing resources for the network service102. The network service interface 112 includes logic (e.g., clientapplication, such as commercially available browser or web-basedapplication) for utilizing a network port (e.g., a wireless port, suchas a cellular, Wireless Fidelity (“WiFi”), or Bluetooth) on the userinterface device 110. The user interface 114 can include a combinationof input and/or output components, such as a touchscreen display,microphone (with corresponding speech recognition), keyboard or otherbutton input mechanism, or other kinds of user interface mechanisms. Thedevice network interface 116 can include logic (e.g., application) thatutilizes a same or different network port to communicate with at leastthe playback device 120. In some implementations, the device networkinterface 116 can include logic (e.g., software, firmware) for enablingthe device to be a member of a personal network.

In an example of FIG. 1, the playback device 120 can include a networkservice interface 122, output component 124 and device network interface126. As an example, the playback device 120 can correspond to anappliance for accessing cloud services, network resources etc. Forexample, the playback device 120 can correspond to a streaming outputappliance, a television, or an Internet appliance. In some variations,the playback device 120 can be another computing device that has userinterface capabilities, but by user preference or designation, is usedin conjunction with the user interface device 110 to access the networkservice 102. Thus, the playback device 120 can correspond to mobilecomputing device (e.g., multifunctional cellular/telephony device, suchas smart phone), tablet, laptop, netbook, combination computing device,personal computer, etc. The network service interface 122 includes logicfor utilizing a network port (e.g., a wireless port, such as a cellular,Wireless Fidelity (“WiFi”), or Bluetooth) on the playback device 120.

The output component 124 generates playback data 125, which can beoutputted as audio and/or video. In one implementation, the playbackdevice 120 includes output devices, such as speakers and/or a displayscreen, for providing the output from the playback data 125. In anotherimplementation, the playback device 120 communicates the playback data125 in some form to another connected device. For example, playbackdevice 120 can signal a connected device analog and/or digital datacorresponding to the playback data 125. In variations, playback device120 can further process the playback data 125, by for example,transcoding the playback data 125 into another format. Still further,the playback device 120 can utilize other services or components (e.g.,network connected components) to output content based on the playbackdata 125, and/or to process the playback data 125 (e.g., transcode theplayback data 125 on another device).

The device network interface 126 of the playback device 120 can includelogic (e.g., application) that utilizes a same or different network portto communicate with at least the user interface device 110. In someimplementations, the device network interface 116 can include logic(e.g., software, firmware) for enabling the device to communicate withthe user interface device 110.

The user interface device 110 and playback device 120 can communicatewith one another over a network link 111. The network link 111 cancorrespond to, for example, a local network link, and more specifically,to a wireless local link (e.g., WiFi or Bluetooth link). In variations,the network link 111 can utilize a wide area network, such as a cellularnetwork and/or the Internet.

In some implementations, each of the user interface device 110 and theplayback device 120 can operate as a satellite on a personal network,such as described in U.S. patent application Ser. No. 10/808,606 (thisapplication being hereby incorporated by reference in its entirety forall purposes). In such an implementation, each of the user interfacedevice 110 and the playback device 120 can utilize an application orother programming logic that enables that device to communicate itscapabilities and connection status to a registry of devices of aspecific personal network. The registry can be centralized on one device(e.g., personal computer), distributed on multiple devices of thepersonal network, or provided as a network service. In oneimplementation, each of the user interface device 110 and the playbackdevice 120 include a personal network registry 118, 128, respectively,which enables that device to act as a member (or satellite) of a user'spersonal network. When implemented as a personal network, some of thecommunications and functionality described as between the user interfacedevice 110 and the playback device 120 can be automatically initiated orperformed, in response to certain conditions. For example, the user'soperation of the user interface device 110 can trigger the playbackdevice 120 to communicate with and utilize the network service 102, in amanner described below with various embodiments. Similarly, anotherimplementation may provide for use of the playback device 120 toautomatically initiate operation such as described below on the userinterface device 110.

In some embodiments, user interface device 110 is operated to gainaccess to the network service 102. For example, the user can launch ashortcut or application launch on user interface device 110. Inresponse, an application operating on user interface device 110generates user interface features for prompting the user to provideinput that may be required or otherwise utilized with network service102. The input provided by the user can be used to access the networkservice 102. In one limitation, user interface device 110 communicatesuser input 107 to the network service 102 via the network serviceinterface 112. The user input 107 can correspond to, for example, loginand password information, or other account/identification informationfor enabling the network service 102 to determine an account or settingfor the user. In response, the network service 102 can issue anauthorization token 131 to the user interface device 110. Theauthorization token 131 can correspond to a data item that is issued bya secure network site to identify and/or authenticate the user. Thenetwork service interface 112 may communicate the authorization token tothe device network interface 116, which in turn communicates theauthorization token 131 to the playback device 120. In oneimplementation, the user interface 116 of the user interface device 110and the output component 124 of the playback device 120 are part of acommon application or application platform, so as to enable theauthorization token 131 to be communicated from user interface device110 to the playback device 120, and then used on the playback device120.

In addition to obtaining and signaling the authorization token 131, theuser interface device 110 can be used to specify selection input 109,for selection of specific network service data items 106 for selectionor retrieval by the playback device 120. For example, the user interfacedevice 110 can be used to search, navigate, browse or otherwise identifydata items for selection or retrieval from the network service 102. Inresponse to receiving the selection input 109, the network service 102can provide links 105 for enabling retrieval of the selected networkservice data items. In variations, the network service 102 can betriggered to automatically identify network service data items for theuser or device. Still further, in other variations, the selection input109 can be sent from the playback device 120. For example, the playbackdevice 120 can store selection input 109 (e.g., favorite playlist,etc.), or receive the selection input 109 from the user interface device110.

The playback device 120 receives the authorization token 131 from theuser interface device 110. In one implementation, the device networkinterface 126 of the playback device 120 receives the authorizationtoken 131 from the user interface device 110, and then communicates thetoken to the network service 102 via the network service interface 122.In addition to signaling the authorization token 131, the playbackdevice 120 may signal links 105 for selected data items. For example,the playback device 120 can signal links 105 to the network service thatidentify media files (e.g., music, video). The links 105 identifynetwork service data items 106, which network service 102 communicatesto the playback device 120. The output component 124 generates playbackdata 125 corresponding to the network service data items 106.

In some implementations, the playback device 120 is triggered toautomatically access the network service 102 using the authorizationtoken 131 and links 105 by the user interface device 110. For example,the user interface device 110 can trigger the playback device 120 intoaccessing data items from the network service 102 by signaling theauthorization token 131.

Playback Device

FIG. 2 illustrates a logical architecture for a playback device,according to one or more embodiments. In an embodiment, a playbackdevice 120 includes a device network interface 210, a retrievalcomponent 230 and an output component 240. In one embodiment, playbackdevice 120 is programmatically configured to communicate and retrievedata items from various different network services. For example, theplayback device 120 can be configured to use links to identify dataitems from a network service, and then trigger operations in which theselect data items are streamed from the network service to the playbackdevice 120. As another example, the playback device 120 can beconfigured to use links to download documents or files identified by thelinks.

The playback device 120 includes service logic 224, which can includeinstruction sets and/or configuration data for individual networkservices. In one implementation, the service logic 224 can includeplugins or program files. Additionally, the service logic 224 caninclude resources for network services, including a network servicelibrary 227 and a digital rights management (DRM) library 229. Thenetwork service library 227 can store, for example, links 205 for use inretrieving network service data items from a corresponding networkservice 202. The DRM library 229 can be provided from a correspondingnetwork service to control, for example, the playback or use of mediaresources from the network service 202.

The device network interface 210 includes components for communicatingwith other devices of the user, such as user interface device 110 (seeFIG. 1). In one implementation, the device network interface 210includes inbound components corresponding to a token handler 212 and alink analysis 214. The token handler 212 receives the token 131 (seeFIG. 1) from the user interface device 110, and communicates the tokento a service logic 224 for accessing an appropriate network service. Thelink analysis 214 can operate to detect properties of links 205 receivedfrom, for example, the user interface device 110. For example, the linkanalysis 214 can determine the particular network service 202 that is tobe utilized in connection with the particular link. In some variationsas described below, the link analysis 214 can also be used to determinewhether a rights management service 201 is to be utilized in connectionwith retrieving a corresponding network service data item from acorresponding network service 202. Both the authorization token 131 andthe playback links 205 can be communicated to the service logic 224 forenabling the retrieval component 230 to access and retrieve data itemsfrom the particular network service 102.

In some embodiments, the retrieval component 230 uses the authorizationcomponent 131 to access a set of data items 219 from a correspondingnetwork service 202. The retrieval component 230 uses the authorizationtoken 131 and one or more playback links 205 to retrieve the data items219. The playback links 205 can be stored as part of the particularnetwork service library 227, communicated from the user interface device110, received from the network service 202, or from an intermediaryservice (as described below). The retrieval component 230 may sequenceor otherwise communicate playback links 205 in series, based on, forexample, control rules as specified in the DRM library 229, or ascommunicated from, for example, the user interface device 110.

The retrieval component 230 can be controlled by control parameters 207in the manner that links 205 can used. For example, the timing orsequence of how the links 205 are retrieved can be controlled by thecontrol parameters 207. The control parameters 207 can be identified bythe service logic 224 used in retrieving the media resources from thenetwork service 202. For example, the control parameters 207 can beidentified or determined from the DRM library 229 used or associatedwith the particular network service.

The retrieval component 230 uses the playback links 205 to retrieve dataitems 209 from the network service 202. In one implementation, datacorresponding to retrieved network service data items 206 are signaledto the output component 240. The output component 240 can generateoutput content or playback on the playback device 120. In a variation,data 206 corresponding to retrieved network service data items 206 aresignaled to the device network interface 210 for processing orcommunication. For example, the data 206 can be signaled to (i) otherdevices that are connected or linked to the playback device 120, (ii)another elements of the same personal network for output, or (iii)another element of the same personal network for services (e.g.,transcoding). Still further, data 206 can be stored on the playbackdevice 120 for later use.

Embodiments recognize that many network services include events thattrigger the need for user interaction, and the ability of the user torespond to the events may be required to avoid disruption in theavailability of the services. For example, a network service may promptthe user for login and password information intermittingly, or ask theuser a question (e.g., ask the user to rate the service). In someembodiments, the retrieval component 230 includes a user interface eventdetection component 232. When a particular network service encounters auser interface event, the UI event detect 232 signals a UI trigger 239that initiates rendering of the UI event on the user interface device110. In one implementation, the UI trigger 239 is received by anoutbound component 216 of the device network interface 210, which thensignals the UI event 217 to the user interface device 110.

In some embodiments, the device network interface 210 also operates toenable the playback device 120 to act as an element or satellite on apersonal network of the user. The device network interface 210 mayinclude a device register 225 that identifies other elements (programs,devices, data sources, accounts etc.) of a user's personal network. Inparticular, the device register 225 can include data that identifies (i)a status of other elements of the personal network (e.g., whether otherelement is active), (ii) relevant capabilities that can be utilized bythe playback device 120 (e.g., transcoding), and (iii) a networklocation of the other elements of the personal network. In this way, thedevice network interface 210 can signal data 206 to other elements ofthe personal network, and/or utilize resources of the personal networkin handling the data 206.

Rights Management Retrieval on Playback Device

In some embodiments, the playback device 120 is able to utilize anintermediary rights management service 201. With further reference toFIG. 2, an intermediary rights management service 201 can provide aservice that enables rights management controls of different networkservices 202 to be implemented as a separate network service. The use ofa web service, for example, to implement rights management for a networkservice provides an alternative to conventional approaches, in whicheach network service 202 requires rights management controls to beimplemented as part of the client application. Among other benefits,some embodiments enable use of the intermediary rights managementservice 201 to eliminate or reduce the need to maintain service-specificprogrammatic or data resources on the playback device 120.

On the playback device 120, the device network interface 210 receivescontrol links 211 which direct a rights management retrieval component220 to the rights management service 201. The rights managementretrieval component 220 uses the control links 216 to access the rightsmanagement service 201. The rights management service 201 identifiescontrol parameters 223 of the network service 202 that is to be utilizedby the particular set of control links 211. As described with otherexamples, the rights management service 201 can be used to handle rightsmanagement for multiple network services (e.g., PANDORA, SPOTIFY, etc.).In one implementation, the rights management service 201 signalsplayback links 205 to the playback device 120, along with controlparameters 223 that are specific to the network service 202 identifiedin the control links 211. The playback links 205 and control parameters223 are used by the retrieval component 230 to retrieve data items 209from the particular network service 202.

Methodology

FIG. 3A illustrates a method for operating a computing device to handleuser interface operations for a network service, separate from a devicein which playback functionality is provided. FIG. 3B illustrates amethod for operating a playback device to output content from a networkservice, separate from a device in which user interface functionalityfor the network services is provided. FIG. 3C illustrates an examplemethod for handling user interface events when user interface andplayback functionality or handled by different devices, according to oneor more embodiments. FIG. 3D illustrates an example method forimplementing a digital rights management (DRM) scheme in context of twodevices that access a network service. FIG. 3E illustrates a method foroperating a network service to enable a user to access a network serviceusing multiple devices. In describing example methods of FIG. 3A throughFIG. 3E, reference may be made to elements or components described withFIG. 1 or FIG. 2 for purpose of illustrating suitable components orelements for performing a step or sub-step being described.

With reference to FIG. 3A, the user interface device 110 implements anapplication platform (308). In one implementation, the applicationplatform corresponds to an application or application service thatprovides or otherwise enables the user interface device to access aparticular network service. The application platform can be specific tothe device type and platform (e.g., operating system), while at the sametime being an application platform that is shared with another deviceand device platform (e.g., playback device 120).

The user interface device 310 operates to display user interfacefunctionality for interacting with a network service (310). In oneimplementation, the user interface functionality can be proprietary, orspecific to the particular network service. For example, a client andweb-based application can be installed and made proprietary or specificto a particular network service. In variations, the user interfacefunctionality can be provided in the form of an application that isgeneric or nonspecific to different network services. For example, anapplication can prompt users for input such as login and password, adesignation of a specific network service they wish to use, and otherinput such as search or navigation input for selecting data items. Stillfurther, the user interface functionality can be provided by way of abrowser or similar application that runs on the user interface device110. For example, a browser can load an application from a network site,and provide the network service through the application running thebrowser.

The user interface device 110 may operate to communicate user input to aselected network service (320). In particular, the input can includeinformation for identifying an account associated with the user. Theinput can also include information to authorized user to access theaccount for example, the information can include a log in, or passwordor other identifier (e.g., machine identifier, cookie etc.). Optionally,the input can also be in the form of selection input, such as search,navigation etc.

The user interface device 110 receives a token from the network service(330). In one implementation, the token can be session specific andprovide authorization for the user to access their account and networkservice using the user interface device 110. In providing theauthorization, the network service may also identify the user interfacedevice 110. For example, the network service may identify the userinterface device 110 by one or more select parameters, including by wayof cookie stored on the user interface device, or by way of a machineidentifier of the user interface device 310.

The user interface device 110 can communicate a set of data items to theplayback device 120 (340). The set of data items can include the token(342). In some variations, the set of data items includes one or moreidentifiers that the network service used to identify the user interfacedevice 110 (344). As the user interface device 110 and the playbackdevice 120 share a common application platform, the set of data itemscommunicated from the user interface device 110 can enable the receivingdevice (e.g., playback device 120) to appear as the user interfacedevice when accessing the network service. In variations, the set ofdata items includes the token, but other identifiers are obtained by theplayback device 120 in a previous exchange with the user interfacedevice 110. For example, the playback device 120 can receive theapplication platform (or portions thereof) from the user interfacedevice 110 at a prior exchange, and identifiers communicated as part ofthe application platform can be used to determine the identifier for thenetwork service.

Under conventional approaches, the token received from a network serviceis valid for the receiving device, often for a particular session. Thenetwork service pairs the subsequent use of the token with, for example,an identifier associated with the application that accesses the service.In an example of FIG. 1 and FIG. 2, the user interface device 110 andplayback device 120 share copies of the same application and itsidentifiers (e.g., cookie). In this way, the playback device 120 is ableto access a particular network service using the identifier communicatedto the user interface device 110.

In some embodiments, the user interface device 110 also communicatelinks that the playback device 120 can use to access data items from anetwork service (350). For example, the user may perform searchoperations for selecting data items using the user interfacefunctionality of the user interface device 110. In some embodiments, thelinks may directly identify data items on a specific network service. Inother embodiments, such as described with FIG. 4-FIG. 6, the link iscommunicated from the user interface device 110 identify an intermediaryrights management services, which modifies are communicates differentlinks for using a particular network service in connection with controlparameters and right management rules of that network service.

With reference to FIG. 3B, the playback device 120 implements anapplication platform that is shared with the UI device 110 (358). In oneimplementation, the application platform corresponds to an applicationor application service that provides or otherwise enables the playbackdevice 120 to access a particular network service. The applicationplatform can be specific to the device type and platform (e.g.,operating system) of the playback device 120. In one variation, theplayback device 120 receives at least portions of the applicationplatform from the UI device 110.

Still further, in some variations, the playback device 120 can receivedata items from the user interface device 110 (360). The data itemsreceived from the UI device 110 can include the token received from thenetwork service, as well as one or more identifiers that enable theplayback device 120 to appear as the UI device 110 when accessing thenetwork service. By way of example, the identifiers can include a cookieoriginally stored on the UI device 110 (e.g., received when the UIdevice 110 accessed the network service), or a machine identifier of theUI device. Additionally, communication of the identifier can also becarried through the shared application platform, which can includefunctionality for making the playback device 120 appear as the UI device110 for external sources.

In an embodiment, the playback device 120 can run an application that isan instance of the network service interface used to access the networkservice on the user interface device 110. For example, the playbackdevice 120 may run an instance of a web-based client application for aparticular network service, so that the token received from the userinterface device 110 enables the playback device 120 to access thenetwork service.

In some embodiments, the playback device 120 can receive playback links205 from the user interface device 110 (364). The playback links 205 canlocate specific data items from a particular network service.Accordingly, the playback device 120 uses the playback links 205 toreceive data items from the network service (368). For example, theplayback links 205 can be used to locate media files, such as songs,videos or other media content. Once located, the network service canstream data corresponding to the selected items to the playback device120. In variations, the retrieval can identify files or documents thatcan be transferred to the playback device 120.

The playback device 120 can output data or content corresponding to theretrieved data items (372). In one implementation, the playback device120 outputs content corresponding to the retrieved data items on thedevice. In variations, the playback device 120 has limited outputcapabilities, but rather it is dedicated device for streaming orsignaling (e.g., in analog form) content data to other output devices,such as conventional non-network enabled televisions or stereos) (374).In one variation, the playback device 120 can stream data to a targetdevice using, for example, a wireless (or wireline) connection. As anaddition or variation, the playback device 120 can utilize devices orresources of the personal network to output or communicate datacorresponding to the retrieved data items (376). For example, theplayback device 120 can transcode the retrieved data items into analternative format using a chance coating resource or application on thepersonal network. As another example, the playback device 120 can streamdata corresponding to the retrieved data items to a target device on thepersonal network while concurrently receiving a stream corresponding tothe data items from the network service.

FIG. 3C illustrates a method for handling user interface eventsgenerated from a network service when multiple devices access thenetwork service at the same time. More specifically, with reference toFIG. 3C, embodiments recognize that network services often generate userinterface events, sometimes even after the session is initiated. Suchuser interface events can require user input to avoid disruptions, ormaintain the full availability of the services. According to oneembodiment, the playback device can include logic that detects when suchuser interface events occur when accessing a network site (380). Forexample, user interface events can include mandatory events, such asprompts that require the user to perform some action, such as confirmthat the user is present, or have the user re-enter credentialinformation. Other network services can require advertisements to bedisplayed, so that each advertisement corresponds to a user interfaceevent. Still further, types of user interface events can include inputthat the user may provide in order to enhance the services. For example,the user may want to signal feedback indicating his like or dislike fora particular data item. In the context of media, for example, the userfeedback can be used in selecting additional data items for that user.Thus, while the user feedback may not necessarily be required, the usermay desire to provide input in order to fully realize the benefits ofthe network service.

With the occurrence of a user interface event, one or more embodimentsprovide that the playback device 120 signals the user interface device110 as to the occurrence of the user interface event (382). In oneimplementation, the playback device 120 can signal the user interfacedevice 110 that the event occurred, and the network service interface112 of the user interface device 110 can access the network service 102in order to obtain user interface information and functionality forenabling the user to provide feedback or response to the event (384). Inanother implementation, the playback device 120 can retrieve the userinterface functionality, and signal it to the user interface device 110,where it is presented to the user.

FIG. 3D illustrates an example method for implementing a digital rightsmanagement (DRM) scheme in context of two devices that access a networkservice. In one embodiment, the UI device 110 and the playback device120 exchange public keys (385). The UI device 110 then accesses thenetwork service and logs in on behalf of the user (386).

After logging in, the UI device may receive a link from the networkservice (388). The link can be for a desired song, playlist or channel.The UI device 110 encrypts the link with the public key (390) and sendsthe encrypted link to the playback device (391). Additionally, the userinterface device 110 may operate to communicate user input to thenetwork service. By way of example, the input can be in the form ofselection input, such as search, navigation etc. For example, the usermay perform search operations for selecting data items using the userinterface functionality of the user interface device 110. In someembodiments, the links may directly identify data items on a specificnetwork service.

The playback device retains the private key and utilizes the private keyto extract and communicate the link to the network service (392). Inresponse to communicating the link, the playback device receivesplayback links from the network service (394). The playback links canidentify data which can be streamed from the network service to theplayback device. For example, the playback links can be used to locatemedia files, such as songs, videos or other media content. Once located,the network service can stream data corresponding to the selected itemsto the playback device 120. In variations, the retrieval can identifyfiles or documents that can be transferred to the playback device 120.

FIG. 3E illustrates a method for operating a network service to enable auser to access a network service using multiple devices, according toone or more embodiments. In an embodiment, network service 102 includesone or more processors that operate to receive user-input correspondinga set of user credentials (393). The set of user credentials can includeuser login and password, or other identifiers that a user can specify inorder to access a network service and link the network service to anaccount.

The network service 102 can identify a device that is used by the userto communicate the set of credentials (395). For example, the networkservice 102 can seek to determine a machine identifier or cookieassociated with the computing device in order to determine whether thedevice was previously used to access the network service 102 using thesame set of credentials.

When the device is identified, a determination can be made as to whetherthe device is a first-in-time device to access the same user account oruse the same set of credentials (396). The first-in-time devicecorresponds to the device the user first utilized to access the networkservice 102 (e.g., the device the user used to establish an accountand/or perform first download).

If the device is the first-in-time device, then access is permitted(397). If however, the device is not the first-in-time device, then anadditional set of determinations can be made to determine whether acondition is satisfied for authenticating the identified device is afollow-on device (398). If the condition is satisfied, then theidentified device is granted access to the network service as afollow-on device (399). Else, the device can be denied access to thenetwork service (400).

The authorization given to the follow-on device can be the same ordifferent than that provided to the first-in-time device. When thefollow-on device is authorized, some embodiments provide that thenetwork service grants access to both the first-in-time device and thefollow-device at the same time (e.g., during a same network session).For example, with reference to FIG. 1, the UI device 110 can correspondto a first-time-device that the user can use to establish an account orsession (e.g., the user can enter login credentials). The playbackdevice 120 can correspond to the follow-on device. The credentialsprovided by the playback device 120 can be programmatically providedthrough, for example, an application interface of the playback device.

By way of example, some embodiments provide for a network service toutilize a condition that corresponds to the identified device being anext device. In next device authorization, the user first connects to anetwork with a first device that then becomes authenticated to use theparticular network service. Then the very next device that accesses thenetwork service and uses the users login and password also becomesauthenticated. In this way, two devices can be authenticated for a givenuser. Additional next device authentication can also be performed on athird or fourth device as specified in implementation (e.g., networkservice allows next two devices that login and use the user'scredentials to be authenticated).

As an addition or alternative, the condition for authentication cancorrespond to the identified device being used to access the networkservice within a given duration from when the first-in-time device isused.

Intermediate Rights Management Service

Many network services utilize business and rights management rules inthe manner in which their services can be used. For example, onlinemusic services can limit the number of times a user can skip a song whenlistening to a channel. Further, in the context of media services, theservice provider is generally limited to a particular library oflicensed works. Under conventional approaches, these and otherrestrictions are typically implemented through data configurations ofthe client application that accesses the network service. For example, amusic service often implements its business and rights management rulesthrough programmatic controls of its corresponding client application.As a result, users may sometimes install numerous applications forvarious network services that they use.

FIG. 4 illustrates a system for implementing a rights management servicein context of a user interface and playback device, according to one ormore embodiments. Some embodiments described herein enable the user of auniversal application on each of the UI device 410 and playback device420 for use with multiple network services. Each of the UI device 410and the playback device 420 can use the universal application to accessany of multiple possible network services, in place of, for example,distinct and dedicated web-based applications for each of the individualnetwork services.

In an example of FIG. 4, a UI device 410 signals a playback device 420in using an intermediary rights management service 430 to access aselected one of multiple possible network services 402. In more detail,the UI device 410 can be operated by a user to submit, for example, userinput 403, and to obtain a token 413 from the network service 402. Theuser interface functionality of the UI device 410 can be based in parton user interface data 411 received from the network service 402. Thetoken 413 can be communicated to the playback device 420. In oneimplementation, the token 413 can be communicated automatically to theplayback device 420 in response to the UI device 410 obtaining the token413 from the network service 402.

In some embodiments, the UI device 410 can also operate to enable theuser to provide selection input for data items of the network service402. For example, the UI device 410 can receive data 411 to enable theuser to select data items. For example, the UI device 410 can receivesearch result, menus and suggestions from the network service 402.Specific data items can be selected on the UI device 410. The UI device410 can include a program that translates or otherwise structures theselection into an intermediate rights management (IRM) link 415, whichcan be communicated from the UI device 410 to the playback device 420.For example, the UI device 410 can include logic that takes the title ofthe selection, as well as the network service from which the selectionis made, and constructs a link to the intermediate management service430 which identifies both the selected title and the network service402.

The playback device 420 receives the token 413 and a set of IRM links415 from the UI device 410. The playback device 420 uses the IRM links415 in accessing the intermediary rights management service 430. Theintermediary rights management service 430 includes logic to map IRMlinks 415 to playback links 425 or data items of the network service402. The intermediary rights management service 430 also includes logicthat identifies control parameters 427 for the particular networkservice 402. The logic for determining the control parameters can alsobe based on context, taking into account, for example, past history orrecent actions of the user (e.g., number of times that the user skippeda song). On the playback device 420, the control parameters 427 controlthe manner in which the playback links 425 are to be used.

The playback device 420 uses the token 413 and the playback links 425when accessing the network service 402. The actions of the playbackdevice 420 in using the playback links 425 can be controlled ordetermined by the control parameters 427. For example, the controlparameters 427 can control (i) the sequence in which the playback links425 are used, (ii) the actions that can be performed when a playbacklink is used, (iii) the actions that can be performed after when aplayback link is used can be determined by the control parameters 427,or (iv) whether the playback link 425 can even be used (e.g., userexceeds number of hours for using network service).

Universal Player and Intermediate Service

Under a typical conventional approach, network services utilizeservice-specific or proprietary client applications for enabling usersto access data items such as media content. Under such a conventionalapproach, the client application controls the manner in which thenetwork service is used, particularly as to rights management of contentprovided from the network service.

In contrast, one or more embodiments provide for the use of theuniversal player 460 to enable computing devices to be operated inutilizing multiple network services, through one client application.With reference to FIG. 4, an embodiment provides for a programmaticcomponent 450 to be included with the network service 402 in order toenable the network service to detect the presence of a universal player460 on the computing device (e.g., playback device 420). When theuniversal player 460 is detected, the network service 402 can implementoperations to communicate with that player in place of the default (e.g.proprietary) player for that service.

In order to implement rights management rules, the universal player 460can be structured to leverage use of the intermediary rights managementservice 430. In one embodiment, the universal player 460 generates orotherwise structures the set of IRM links 415 from input that can bereceived on either the playback device 420 or on the UI device. Each IRMlink 415 can be structured so as to point to the intermediary rightsmanagement service 430. The IRM links 415 can identify a specific mediaresource and network service. In one embodiment, the universal player460 signals the IRM links 415 to the intermediary rights managementservice 430 in order to obtain playback links 425 and control parameters437. The control parameters 427 can implement rights management rules ofthe network service. The implementation of the right management rulescan be performed in a manner described with, for example, FIG. 4 andFIG. 5. In this way, the universal player 460 can implement differentrights management rules for different network services, by communicatingwith the intermediary rights management service 430.

In a variation, the universal player 460 can reside on the UI device410, and the IRM links 415 can be signaled to the playback device 420which then obtains the playback links 425 and the control parameters427. In another variation, the universal player 460 can reside on the UIdevice 410, and the universal player 460 can generate and signal the IRMlinks 415 to the intermediary rights management service 430 in order toobtain the playback links 425 (along with the control parameters 427).The playback links 425 and the control parameters 427 can be signaled tothe playback device 420.

FIG. 5 illustrates an architecture for a rights management service,according to an embodiment. A rights management service 430 can beimplemented at, for example, a website that is accessible to playbackdevice 120. In an embodiment, the rights management service 430 includesa device interface 510, a link analysis component 520, and a collectionof services for individual network services. For each network service,the rights management service 430 includes a service library 530 and aset of service rules 532. Each service library 530 can include link data531 that correlates identifiers specified from an incoming request withmedia resources available through the particular network resource. Thelink data 531 can enable construction of links specific to the networkservice of the service library 530 based on identifiers specified by theuser when operating, for example, the universal player. Each servicelibrary 530 may also include a list of media resources (e.g., musictitles, television programs or videos, movie titles, documents etc.)available on a corresponding network service. The service rules 532 canalso designate the control parameters, such as the number of times theuser can skip a title, or the number of hours that the user can receivemedia content from the network service.

As described with prior examples, the device interface 510 cancommunicate with devices to receive IRM links 512. The link analysis 520inspects the link to identify (i) the network service, and (ii) the dataitem (e.g., title) that is to be retrieved from the network service. Thelink analysis component 520 can use link data 531 for the particularnetwork service in order to correlate identifiers (or other aspects) ofthe IRM links 512 (e.g., track) into playback links 525 for the specificservice. In one implementation, the link analysis component 520 obtainsplayback links from the respective service library 530 by using the linkdata 531 to correlate elements of the IRM links 512 to playback links525. In a variation, the link analysis component 520 constructs playbacklinks 525 using the link data 531 and the elements of the IRM links 512.In still another variation, the link analysis 520 can operate to accessthe service library 530 of the identified network service in order todetermine the data item or playback link 525 that corresponds to the IRMlink 512. The playback links 525 are communicated to the playback device420.

Additionally, the link analysis 520 also accesses the service rules 532for the identified network service in order to determine the controlparameters 527 for use with the playback link 525. The playback link 525and control parameters 527 are communicated back to the playback device420 (FIG. 4) from which the IRM link 512 originated. The playback device420 can signal the playback links 525 to the network service in order toreceive streaming media identified by the individual playback links fromthe particular network service.

FIG. 6 illustrates a method for utilizing a rights management service,according to one or more embodiments. A method such as described withFIG. 6 can be implemented using components or elements such as describedwith embodiments of FIG. 1, FIG. 2 or FIG. 4. Accordingly, reference maybe made elements of prior examples for purpose of illustrating suitablecomponents or elements for performing a step or sub-step beingdescribed.

According to one or more embodiments, the playback device 420 receives atoken from the UI device 410 (610). The playback device 420 alsoreceives a rights management link from the UI device 410 (620). In oneimplementation, the UI device 410 constructs the IRM link 512 for therights management service 430 based on a user selection or designationof a desired data item. The constructed IRM link 512 can specify thenetwork service that is to be used to receive the selected data items.

The playback device 420 uses the rights management link to obtain thecorresponding playback link 525 (630) from the intermediary rightsmanagement service 430, rather than the network service itself. Asmentioned with other examples, the rights management service 430 canprovide a middle network interface for multiple different networkservices, each of which may have their own rights management rules. Inproviding the playback link 525 to the playback device, the intermediaryrights management service 430 can include or integrate controlparameters 527 that control use of the provided playback links 525 to bein accordance with rights management rules of the specific networkservice. With reference to an example of FIG. 5, the construction of theplayback link 525, along with the use of control parameters 527 can bedetermined from the corresponding service library 530.

In this way, the rights management service 430 can determine a set ofplayback links 525 for a particular network service using the IRM link512 (which can be provided from the playback device 420). The rightsmanagement service 430 can then communicate the set of playback links525 to the playback device 420. The rights management service 430 canalso encode, or specify the control parameters 527 for the playbacklinks 525 based on the network service that is selected for theplayback.

The playback device 420 uses the playback links to receive correspondingdata items from the specified network service (640), in accordance withthe identified control parameters for the network service 402. Forexample, the playback device 420 can trigger the network service 402into streaming data corresponding to individual data items to theplayback device. Alternatively, the playback device 420 can download afile or document corresponding to the identified data items.

In a variation, the UI device 410 can submit identifiers or IRM links415 to the rights management service 430 in order to receive playbacklinks 425. The UI device 410 can then communicate the playback links 425to the playback device 420.

In another variation, the UI device 410 can submit identifiers or IRMlinks 415 to the rights management service 430, and the rightsmanagement service can signal the IRM links 415 to the playback device420. In such an implementation, the communication from the UI device 410can identify the playback device 420 or otherwise enable the playbackdevice 420 to directly receive playback links 425 from the rightsmanagement service 430.

Hardware Description

FIG. 7A illustrates a user interface device in accordance with one ormore embodiments. By way of example, the user interface device 700 cancorrespond to a mobile computing device (e.g., multifunctional cellulardata/voice device), tablet, laptop, ultraportable computing device, orother network enabled device that is capable of receiving user input andenabling direct user interaction.

In the example of FIG. 7A, the processor 710 is coupled to inputmechanisms 722 and communication sub-systems 730 to provide the input toan external source. Sample input mechanisms 722 include keyboards,touch-screens, microphones or any appropriate device. Examples ofcommunication sub-systems include any appropriate sub-system for sendingand receiving data, such as wireless ports, or cellular ports. Processor710 is coupled to memory resource 734 to store data, including incomingdata, such as authorization token 131, referring to FIG. 1.

Processor 710 can be configured to generate audio and visual output. Forexample, in the embodiment of FIG. 7A, processor 710 can provide audiooutput 712 and visual output on display 720. A user interface may beprovided on display 720 to enable user interaction with networkservices. The display can provide or be used in conjunction with otherdevices to enable users to receive user input from input mechanisms 722.

According to embodiments, the memory resources 734 store instructionsfor programs, applications and other logic that enable functionalitysuch as described with examples of FIG. 1 through FIG. 6. For example,the memory resources 734 can store instructions 711, including, forexample, instructions for (i) accessing network service 102 (see FIG.1)(e.g., client/proprietary application for network service), (ii)communicate with a playback device 750 in sending, for example, a tokenor programmatic credential, links for accessing media resources from thenetwork service to the playback device, and in receiving data (e.g.,triggers, user interface events); (iii) providing a user interface forthe user to utilize in interacting with the network service; (iv)structuring links so that they identify media resources on a networkservice but link to an intermediary rights management service; and/or(v) communicating as a node or satellite on a personal network.

FIG. 7B illustrates a playback or output component, according to one ormore embodiments. In an example of FIG. 7B, the playback device cancorrespond to a device that is dedicated to generate output for otherconnected devices. For example, the playback device 750 can correspondto an appliance or an accessory device, having no or minimal mechanismfor directly receiving user input. In one implementation, the playbackdevice 750 corresponds to a connected accessory for non-connecteddevices (e.g., non-Internet enabled televisions or stereos), and cangenerate, for example, an output signal (digital or analog) for suchdevices. In variations, the playback device 750 can correspond to anycomputing device (e.g., mobile computing device, tablet, laptop ornetbook, etc.) which the user elects to use as a playback device inconnection with user interface device 700.

Processor 760 of FIG. 7B is connected to other devices or computers vianetwork connections. In one implementation, the processor 760 generatesan output data set which is outputted through the output component 770,or communicated to another device via one of the communication ports782, 784 or 786.

In an example of FIG. 7B, playback device 750 includes a processor 760,memory resources 764, an output component 770, and one or morecommunication sub-systems 782, 784, 786. The output component 770 cancorrespond to, for example, an audio and/or video output. Thecommunication sub-systems 782, 784, 786 can respectively include, forexample, a direct connect port, a first wireless port (e.g., WirelessFidelity or Bluetooth), and a second wireless port (e.g., cellular,etc.). Thus, the communication sub-systems 782, 784, 786 can be wirelessand/or wireline. The playback device 750 can connect to other devices orcomputers via connections formed through the communication sub-system782, 784 or 786. For example, in the embodiment of FIG. 7B, directconnection 730 and wireless network ports 740 and 742 enablecommunication to and from the processor 760. The memory resources 764can store instructions 761, including instructions for (i) accessingnetwork service 102, (ii) communicating with the user interface device700 in receiving, for example, a token or programmatic credential, linksfor accessing media resources from the network service to the playbackdevice, and in sending data (e.g., triggers, user interface events);(iii) operating a universal player capable of connecting to andaccessing multiple different services and utilizing an intermediaterights management service to perform a variety of actions; and/or (iv)communicating as a node or satellite on a personal network.

Embodiments have been described in detail herein with reference to theaccompanying drawings, variations to specific embodiments and detailsare encompassed by this disclosure. It is intended that the scope of theinvention is defined by the following claims and their equivalents.Furthermore, it is contemplated that a particular feature described,either individually or as part of an embodiment, can be combined withother individually described features, or parts of other embodiments.Thus, absence of describing combinations should not preclude theinventor(s) from claiming rights to such combinations.

What is claimed is:
 1. A system comprising: a memory that storesinstructions; one or more processors that use instructions stored inmemory to: identify a device used to communicate a set of credentials;determine that the identified device is not a first-in-time device usedto access a network service using the set of credentials; determinewhether a condition is satisfied for authenticating the identifieddevice as a follow on device to the first-in-time device, the conditionincluding the identified device accessing the network service using theset of credentials within a defined time period following thefirst-in-time device accessing the network service using the set ofcredentials; if the condition is satisfied, permit access to the networkservice for the identified device based on the set of user credentials;else deny access to the network service.
 2. The system of claim 1,wherein the condition includes the identified device being a next deviceafter the first-in-time device to access the network service using theset of credentials.
 3. The system of claim 1, wherein if the identifieddevice is permitted to access the network service, the one or moreprocessors permit the first-in-time device and the identified device toaccess the network service during a same session.
 4. The system of claim1, wherein the set of credentials include a password.
 5. The system ofclaim 1, wherein the set of credentials includes an encrypted token. 6.A method for providing a network service, the method being implementedby one or more processors and comprising: identifying a device used tocommunicate a set of credentials; determining that the identified deviceis not a first-in-time device used to access the network service usingthe set of credentials; making a determination as to whether a conditionis satisfied for authenticating the identified device a follow on deviceto the first-in-time device, the condition including the identifieddevice accessing the network service using the set of credentials withina defined time period following the first-in-time device accessing thenetwork service using the set of credentials; and permitting access tothe network service for the identified device based on the set of usercredentials only if the condition is satisfied.
 7. The method of claim6, wherein the condition includes the identified device being a nextdevice after the first-in-time device to access the network serviceusing the set of credentials.
 8. The method of claim 6, wherein if theidentified device is permitted to access the network service, the one ormore processors permit the first-in-time device and the identifieddevice to access the network service during a same session.
 9. Themethod of claim 6, wherein the set of credentials include a password.10. The method of claim 6, wherein the set of credentials includes anencrypted token.
 11. A non-transitory computer-readable medium thatstores instructions that, when executed by one or more processors,causes the one or more processors to perform operations that include:identifying a device used to communicate a set of credentials;determining that the identified device is not a first-in-time deviceused to access a network service using the set of credentials;determining whether a condition is satisfied for authenticating thedevice as a follow on identified device to the first-in-time device, thecondition including the identified device accessing the network serviceusing the set of credentials within a defined time period following thefirst-in-time device accessing the network service using the set ofcredentials; if the condition is satisfied, permit access to the networkservice for the identified device based on the set of user credentials;else deny access to the network service.
 12. The computer-readablemedium of claim 11, wherein the condition includes the identified devicebeing a next device after the first-in-time device to access the networkservice using the set of credentials.
 13. The computer-readable mediumof claim 11, wherein if the identified device is permitted to access thenetwork service, the one or more processors permit the first-in-timedevice and the identified device to access the network service during asame session.
 14. The computer-readable medium of claim 11, wherein theset of credentials include a password.
 15. The computer-readable mediumof claim 11, wherein the set of credentials includes an encrypted token.16. A system comprising: means for identifying a device used tocommunicate a set of credentials; means for determining that theidentified device is not a first-in-time device used to access a networkservice using the set of credentials; means for making a determinationas to whether a condition is satisfied for authenticating the identifieddevice as a follow on device to the first-in-time device, the conditionincluding the identified device accessing the network service using theset of credentials within a defined time period following thefirst-in-time device accessing the network service using the set ofcredentials; means for permitting access to the network service for theidentified device based on the set of user credentials only if thecondition is satisfied.
 17. The system of claim 16, wherein thecondition includes the identified device being a next device after thefirst-in-time device to access the network service using the set ofcredentials.
 18. The system of claim 16, wherein if the identifieddevice is permitted to access the network service, the one or moreprocessors permit the first-in-time device and the identified device toaccess the network service during a same session.
 19. The system ofclaim 16, wherein the set of credentials include a password.
 20. Thesystem of claim 16, wherein the set of credentials includes an encryptedtoken.